Abstract

Access control technology is one of the basic technology of the protection workflow application security . Has been widespread concern . Workflow management system access control technology , in-depth study , a workflow management system access the control model PCBAC ( Coloured Petri Net and Constraint BasedAccess Control ) , the model using Colored Petri Nets transitions arc expression context of business data access control ; business constraints rule applied by the process at the same time , least privilege , separation of duties and the people responsible for organizational security principles . Paper organization and management , access rights in the system rights management , and process definition tools and business constraints set components , workflow execution services , resource services , user services , authorized service components , and a detailed description of the main function of the above-mentioned components and call relationship with each other , given the specific implementations , the main algorithms and data structures . The access control model has been applied topics prototype system in our hospital graduate verify .